CRITICAL🇵🇱 Wersja polska

CVE-2026-51537

CVSS 9.1pub. 2026-07-13upd. 2026-08-11

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

  • Opener Project Opener

    APP
    Opener Project
    2.3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2026-51541CRITICAL9.1PL ✓same product

Out-of-bounds read w OpENer 2.3.0 — parsowanie wiadomości CIP/ENIP

CVE-2026-51538CRITICAL9.1PL ✓same product

Błędna kontrola dostępu w OpENer — przejęcie sesji encapsulation

CVE-2026-51536CRITICAL9.1PL ✓same product

Stack Buffer Overflow w OpENer 2.3.0 przy parsowaniu pakietów CIP

CVE-2026-51540CRITICAL9.8PL ✓same product

Integer underflow w OpENer 2.3.0 — krytyczne uszkodzenie pamięci (RCE)

CVE-2022-43604CRITICAL10.0PL ✓same product

RCE przez out-of-bounds write w OpENer EtherNet/IP Stack